The information provided is too little to really help.
Does your CHR have connectivity at all when checking from vm console?
Does it do its job beside Winbox connectivity?
Did I get it right that you can connect to the web interface but not through Winbox?
How are you connecting though Winbox? via IP address or via MAC address? (I've had similar issues with connecting to MAC addresses and it was a NIC issue on the computer I was using Winbox on).
How's your vSwitch utilization looking?
Does the CHR have VRRP interfaces and you're trying to connect to the VRRP or interface MAC? (This would indicate the need for promiscouos mode on that port group)
Did subnets change and are there allowed subnets defined in IP -> Services?
You see, there's a lot of questions remaining...
MTCNA, MTCUME, MTCWE
There are 10 types of people: Those who understand binary and those who don't.
There are two types of people: Those who can extrapolate from incomplete data